JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.112.57.191

64.112.57.191 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 41%: ?

41%

ISP	Nexus Bytes LLC
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	nexusbytes.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.112.57.191

Whois 64.112.57.191

IP Abuse Reports for 64.112.57.191:

This IP address has been reported a total of 48 times from 25 distinct sources. 64.112.57.191 was first reported on July 8th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 TCATERDSBE	2026-08-17 14:54:00 (2 weeks ago)	SQL Injection	SQL Injection
🇺🇸 integrantservices.com	2026-08-07 01:40:38 (3 weeks ago)	(wordpress) Failed wordpress login from 64.112.57.191 (US/United States/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-08-04 06:27:15 (4 weeks ago)	(mod_security) mod_security (id:212620) triggered by 64.112.57.191 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:212620) triggered by 64.112.57.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 02:25:57.620787 2026] [security2:error] [pid 1357689:tid 1357689] [client 64.112.57.191:44221] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|www.powerkiteforum.com\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /profile.php?id=1153269341&=<scr<script>ipt>alert(qsxss9k7z)</scr</script>ipt>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.powerkiteforum.com"] [uri "/profile.php"] [unique_id "anGF9en7wpAxZrNyGfe_SQAAACo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 conseilgouz	2026-08-04 02:48:55 (4 weeks ago)	loe-6 : Trying access system files=>/forum/up-forum/241-pb-affichage-pdf-gallery?start=6'(htacc ... show more loe-6 : Trying access system files=>/forum/up-forum/241-pb-affichage-pdf-gallery?start=6'(htaccessphp) show less	Hacking
🇺🇸 TPI-Abuse	2026-08-03 22:33:09 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 64.112.57.191 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 64.112.57.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 18:32:47.726958 2026] [security2:error] [pid 213852:tid 213878] [client 64.112.57.191:40261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.uoexpanse.com"] [uri "/.env.production"] [unique_id "anEXD3yysjeCjexCNTYRxwAAAFY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Matthew Ping	2026-08-01 14:45:15 (1 month ago)	ModSecurity rule 949110 triggered on d865. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇺🇸 juguemosalacarioca.com	2026-07-27 17:34:08 (1 month ago)	Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080	Web App Attack
🇺🇸 ipblock.com	2026-07-26 03:13:00 (1 month ago)	IPBlock protected site ID [4730-fr]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-07-25 11:28:11 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=POST path=/checkout/cart/add/uenc/aHR ... show more Requests denied due to active blacklist hits (tenant=82 method=POST path=/checkout/cart/add/uenc/aHR0cHM6Ly91bW5pdHphLmNvbS93aGVlbHMuaHRtbD9jYXQ9/product/11532/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇩🇪 raph	2026-07-22 12:54:33 (1 month ago)	[001] honeypot form submission	Web Spam Blog Spam
🇫🇷 conseilgouz	2026-07-18 18:51:12 (1 month ago)	joe-12 : Block return, carriage return, ... characters=>/media/vendor/bootstrap/js/dropdown.min.js?5 ... show more joe-12 : Block return, carriage return, ... characters=>/media/vendor/bootstrap/js/dropdown.min.js?5.3.8='(') show less	Hacking
🇺🇸 ipblock.com	2026-07-17 13:07:00 (1 month ago)	IPBlock protected site ID [4055-d][s=01]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-07-17 10:03:00 (1 month ago)	IPBlock protected site ID [4055-d][s=03]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-07-16 17:20:00 (1 month ago)	IPBlock protected site ID [4730-fr]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
🇺🇸 TheJimmo	2026-07-16 13:47:12 (1 month ago)	64.112.57.191 64.112.57.191 - - [16/Jul/2026:13:45:34 +0000] "POST /modules/attributewizardpro/file_ ... show more 64.112.57.191 64.112.57.191 - - [16/Jul/2026:13:45:34 +0000] "POST /modules/attributewizardpro/file_upload.php HTTP/1.1" 404 13412 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.57.191 64.112.57.191 - - [16/Jul/2026:13:45:34 +0000] "GET /%3Fgf_page=upload HTTP/1.1" 404 13368 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.57.191 64.112.57.191 - - [16/Jul/2026:13:45:34 +0000] "GET /index.php?option=com_travelbook&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 404 13580 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.57.191 64.112.57.191 - - [16/Jul/2026:13:45:45 +0000] "GET /index.asp HTTP/1.1" 404 13349 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.3 ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.242

🇫🇷 77.239.124.181

🇺🇸 45.194.67.46

🇺🇸 20.62.207.8

🇨🇱 186.107.180.199

🇷🇺 185.91.52.152

🇷🇺 176.118.247.226

🇹🇭 124.197.52.178

🇨🇳 122.243.79.56

🇺🇸 66.249.66.64

🇺🇸 66.132.172.138

🇮🇹 37.186.214.146

🇺🇸 32.196.117.94

🇷🇸 178.220.77.194

🇺🇦 176.103.3.161

🇬🇧 167.71.136.213

🇺🇸 158.94.187.2

🇻🇳 116.118.8.192

🇧🇪 84.193.128.162

🇳🇱 45.148.10.140